Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 3

Export CSV
CVE-2023-6324

ThroughTek Kalay SDK error in handling the PSK identity

ThroughTek Kalay SDK uses a predictable PSK value in the DTLS session when encountering an unexpected PSK identity

CVSS 3.1 · 8.1 High EPSS < 1% KEV · Not listed
Vendors
Owletcare Roku Throughtek and 1 more
Products
Cam Cam 2 Cam 2 Firmware and 6 more
CVE-2023-6323

ThroughTek Kalay SDK insufficient verification of message authenticity

ThroughTek Kalay SDK does not verify the authenticity of received messages, allowing an attacker to impersonate an authoritative server.

CVSS 3.1 · 4.3 Medium EPSS < 1% KEV · Not listed
Vendors
Owletcare Roku Throughtek and 1 more
Products
Cam Cam 2 Cam 2 Firmware and 6 more
CVE-2023-6321

Owlet Camera OS command injection

A command injection vulnerability exists in the IOCTL that manages OTA updates. A specially crafted command can lead to command execution as the root user. An attacker can make authenticated requests to trigger this vulnerability.

CVSS 3.1 · 7.2 High EPSS 2.7% KEV · Not listed
Vendors
Owletcare Throughtek
Products
Cam Cam 2 Cam 2 Firmware and 2 more